This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft File: t5VYLHMwLrCpdEd2AwSYUIM70hA.mft (raw, json) Hash identifier: 1XKgqaxJh5PsuA9dICr7y/jnMLJG5yM6T6WidrwuPig= Subject key identifier: 5C:7E:E3:34:3D:CE:63:16:FE:E4:36:29:D9:9A:43:89:E5:87:F8:FC Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10 Certificate issuer: /CN=b795582c73302eb0a974477603049850833bd210 Certificate serial: 019B19BC89A48805C5EB9863A4AB977A7AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 22:02:24 +0000 Manifest this update: Sat 13 Dec 2025 22:02:24 +0000 Manifest next update: Sun 14 Dec 2025 22:02:24 +0000 Files and hashes: 1: BHWwRry-UijUF9-7a9qe-3in6HE.roa (hash: GplxxbcF603HuP5zyFWWBxSgE208s+IGY7yLNmT6LyQ=) 2: t5VYLHMwLrCpdEd2AwSYUIM70hA.crl (hash: DtXEozgI5ZXtCGiHdGzKJzD3PhRLlXNzLm+i8ZvD+eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:89:a4:88:05:c5:eb:98:63:a4:ab:97:7a:7a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b795582c73302eb0a974477603049850833bd210 Validity Not Before: Dec 13 22:02:24 2025 GMT Not After : Dec 14 22:02:24 2025 GMT Subject: CN=5c7ee3343dce6316fee43629d99a4389e587f8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:25:f9:8d:e4:9a:4e:59:1a:df:49:51:97: b1:c1:f4:65:5a:c1:7c:85:81:fa:38:56:8a:03:7e: 06:b9:01:f7:6d:96:0c:e8:a2:8c:77:8d:a2:6e:79: 58:e4:8a:f0:4c:01:68:88:47:2a:cc:ba:d7:7b:78: fe:23:81:f5:d3:95:8f:3d:7f:37:de:6c:b4:d6:ea: ac:59:67:85:06:e3:2f:ff:ae:fd:dd:d5:d3:ea:97: 1d:e3:a1:3e:2c:17:5d:87:08:c1:16:ff:95:2f:38: ae:a3:d0:db:ac:4e:35:b7:11:f6:f8:c8:c2:4e:6d: 9f:78:53:48:b2:70:87:96:3d:91:7e:f5:58:4f:9d: 62:6d:44:a2:83:0f:14:39:02:33:52:99:d7:bf:8b: d6:a0:0d:0d:77:3a:d2:32:2c:24:54:42:0f:51:46: 0f:a7:a3:fa:d2:9b:f3:ec:55:b6:60:62:06:37:e7: 07:03:2c:44:b1:41:14:d1:90:22:33:b8:74:31:c4: b1:1e:4b:02:e0:27:73:6f:8b:24:42:47:8b:ba:e6: 5c:e1:93:b5:2b:ba:84:f8:ff:f0:fa:ea:b3:75:b4: ed:a8:1f:e4:c1:6f:9e:26:1f:e7:0c:8c:30:b5:c1: 22:eb:9f:22:6c:66:2c:8c:18:c7:df:7e:96:b3:9a: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7E:E3:34:3D:CE:63:16:FE:E4:36:29:D9:9A:43:89:E5:87:F8:FC X509v3 Authority Key Identifier: keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1b:37:dd:4c:e3:29:a7:17:67:ec:81:1a:b5:da:5e:ab:a5: d5:8f:c1:72:a3:aa:ab:a2:2b:20:61:87:bc:1f:86:47:61:fc: 97:a5:0d:df:50:45:43:fa:86:fe:8d:3e:0a:28:f3:99:2f:22: 34:06:27:8d:6c:c2:d8:26:b2:b9:09:da:b1:f0:9f:96:1a:61: 29:8a:fd:02:a0:69:8f:2d:e5:c9:7c:77:6d:07:1b:16:9d:6d: 0f:06:3a:a4:1b:6e:b3:f9:80:37:5c:c8:21:06:22:5f:c5:96: c8:05:c3:55:0b:c4:7a:98:ec:10:80:8a:11:d4:52:98:99:a4: 17:79:2c:5d:26:d2:cb:fb:4b:58:2a:62:07:50:a3:9a:95:81: 15:29:e5:a5:37:cf:e4:ec:c6:f6:07:59:05:0a:b5:4a:e3:34: 76:3d:22:a9:3f:06:e2:09:88:b5:fe:9c:91:ff:2e:fa:f4:47: 0b:99:fb:4c:0d:ba:c3:03:b3:1f:60:62:36:78:cf:4f:ef:a6: 0a:79:d0:a7:d9:6d:8d:51:43:7b:66:00:52:56:d9:d9:ff:53: 12:46:3a:f5:4a:c2:de:9e:b8:21:71:dd:56:4d:7b:77:5b:58: 86:0e:ab:a7:cc:ae:09:4e:b6:c1:39:31:db:5c:6b:b6:f1:75: 75:8b:47:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvImkiAXF65hjpKuXenr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTU1ODJjNzMzMDJlYjBhOTc0NDc3NjAzMDQ5ODUwODMz YmQyMTAwHhcNMjUxMjEzMjIwMjI0WhcNMjUxMjE0MjIwMjI0WjAzMTEwLwYDVQQD Eyg1YzdlZTMzNDNkY2U2MzE2ZmVlNDM2MjlkOTlhNDM4OWU1ODdmOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstsl+Y3kmk5ZGt9JUZexwfRlWsF8 hYH6OFaKA34GuQH3bZYM6KKMd42ibnlY5IrwTAFoiEcqzLrXe3j+I4H105WPPX83 3my01uqsWWeFBuMv/6793dXT6pcd46E+LBddhwjBFv+VLziuo9DbrE41txH2+MjC Tm2feFNIsnCHlj2RfvVYT51ibUSigw8UOQIzUpnXv4vWoA0NdzrSMiwkVEIPUUYP p6P60pvz7FW2YGIGN+cHAyxEsUEU0ZAiM7h0McSxHksC4Cdzb4skQkeLuuZc4ZO1 K7qE+P/w+uqzdbTtqB/kwW+eJh/nDIwwtcEi658ibGYsjBjH336Ws5rPZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx+4zQ9zmMW/uQ2KdmaQ4nlh/j8MB8GA1UdIwQY MBaAFLeVWCxzMC6wqXRHdgMEmFCDO9IQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMt YzJiZDVmYzA0NDI0LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMtYzJiZDVmYzA0NDI0 LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBs33Uzj KacXZ+yBGrXaXqul1Y/BcqOqq6IrIGGHvB+GR2H8l6UN31BFQ/qG/o0+CijzmS8i NAYnjWzC2CayuQnasfCflhphKYr9AqBpjy3lyXx3bQcbFp1tDwY6pBtus/mAN1zI IQYiX8WWyAXDVQvEepjsEICKEdRSmJmkF3ksXSbSy/tLWCpiB1CjmpWBFSnlpTfP 5OzG9gdZBQq1SuM0dj0iqT8G4gmItf6ckf8u+vRHC5n7TA26wwOzH2BiNnjPT++m CnnQp9ltjVFDe2YAUlbZ2f9TEkY69UrC3p64IXHdVk17d1tYhg6rp8yuCU62wTkx 21xrtvF1dYtH/w== -----END CERTIFICATE-----Generated at Sun Dec 14 01:51:32 2025 by rpki-client